Privacy Policy

01 Scope of this Policy

• This Policy applies to personal data we collect through the Website only.
• The Website is an informational / brochure website. It does not offer online ordering, payment processing or e-commerce.
• This Policy does not apply to third-party websites or platforms we link to (including Google, Instagram, TikTok, YouTube and Facebook), which are governed by their own privacy policies.
• Individual franchised outlets may process customer data independently in the course of their operations. This Policy covers the brand Website only, not in-store processing carried out by franchisees.

02 Personal Data We Collect

(a) Information you provide to us directly

• Newsletter subscription: your name and email address.
• Franchise enquiry form: your name, email address, phone number, city or location of interest, and any details you choose to share about your background or investment interest.
• Careers / job applications (a feature we may introduce): your name, contact details, CV/résumé, employment and education history, and any information contained in your application.
• Direct communications: information you provide if you contact us by email or, where available, through WhatsApp click-to-chat or similar messaging features we may introduce.

(b) Information we collect automatically

• Technical data: IP address, browser type, device information and operating system.
• Usage data: pages viewed, time spent on the Website, referring URLs and interactions.
• Cookies and similar technologies: as described in Section 3.

We do not intentionally collect special categories of personal data (such as health, religious, biometric or financial data) through the Website. Please do not submit sensitive personal data through our forms.

03 Cookies and Tracking Technologies

We may use the following categories of cookies and similar technologies:

• Essential cookies: necessary for the Website to function properly.
• Analytics cookies: for example Google Analytics, to understand how visitors use the Website so we can improve it.
• Marketing cookies: for example the Meta (Facebook) Pixel and/or TikTok Pixel, to measure and support our marketing activities.

You can manage cookies through your browser settings and, where presented, through our cookie consent banner. Disabling certain cookies may affect Website functionality.

04 How We Use Your Personal Data and Our Legal Basis

We process personal data for the following purposes:

• Marketing and newsletters: to send you updates and communications you have subscribed to (legal basis: your consent).
• Franchise enquiries: to respond to, assess and follow up on franchise enquiries and communicate with you about franchise opportunities (legal basis: steps taken at your request and/or our legitimate business interests).
• Recruitment: to process and assess job applications (legal basis: steps taken at your request prior to any potential employment).
• Website operation: to operate, maintain, secure and improve the Website (legal basis: our legitimate business interests).
• Legal compliance: to comply with applicable laws and regulatory obligations (legal basis: legal obligation).

Under the PDPL, we rely on your consent and/or our legitimate business interests as the lawful basis for processing, as indicated above.

05 Marketing Communications

If you subscribe, we may send you information about The Bhukkad Café, new outlets, offers and franchise news. You may withdraw your consent or unsubscribe at any time using the unsubscribe link in our emails or by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

06 How We Share Personal Data

We do not sell your personal data. We may share it with:

• service providers acting on our behalf (for example, website hosting, email/CRM platforms and analytics providers), under appropriate confidentiality and data-protection obligations;
• members of our group and affiliated entities, in connection with our brand and franchise operations;
• our professional advisers (legal, accounting and similar);
• competent authorities, courts or regulators where required by UAE law; and
• a successor entity in connection with any merger, acquisition, restructuring or sale of assets.

07 International Data Transfers

Some of our service providers may store or process personal data on servers located outside the UAE. Where we transfer personal data outside the UAE, we will do so in accordance with the PDPL — for example, by transferring to jurisdictions recognised as providing an adequate level of protection, by putting in place appropriate contractual safeguards, or by relying on another permitted basis (such as your consent or necessity for the performance of a contract).

08 Data Retention

We retain personal data only for as long as necessary for the purposes set out in this Policy, including to meet any legal, accounting or reporting requirements. Newsletter data is retained until you unsubscribe. Franchise enquiry data is retained for the period necessary to evaluate and pursue the opportunity and for a reasonable period thereafter. Job application data is retained for the duration of the recruitment process and a reasonable period afterwards.

09 Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. However, no transmission of data over the internet can be guaranteed to be completely secure.

10 Your Rights

Subject to the PDPL, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data in certain circumstances;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• request the transfer of your data (data portability) where applicable; and
• lodge a complaint with the UAE Data Office.

To exercise any of these rights, please contact us using the details in Section 14. We may need to verify your identity before responding to your request.

11 Children’s Privacy

The Website is intended for a general audience and is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

12 Third-Party Links and Social Media

The Website contains links to third-party platforms, including the Google Business pages of our outlets and our profiles on Instagram, TikTok, YouTube and Facebook. We are not responsible for the privacy practices or content of these third parties, and we encourage you to review their privacy policies.

13 Changes to this Policy

We may update this Policy from time to time. The “Last updated” date above indicates the latest revision. Where required by law, we will notify you of material changes.

14 Contact Us

Controller: The Operator of The Bhukkad Café brand, Dubai, United Arab Emirates.

Email: info@thebhukkadcafe.com

For privacy-related requests, please mark your message “Data Protection / Privacy Request”.

15 Governing Law

This Policy is governed by the laws of the United Arab Emirates as applicable in the Emirate of Dubai. Any dispute relating to this Policy or to our processing of your personal data shall be subject to the jurisdiction of the Dubai Courts.